ChangeIntel IT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Sources need attention Customize Public modeDiscuss ChangeIntel on Discord

Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

2592 matches in Windows · most urgent first CSVText
CVE Vulnerability Severity CVSSEPSSImpact StatusFixed by
CVE-2026-83997 Windows Message Queuing Remote Code Execution VulnerabilityWindows Message Queuing Important 8.10.7%RCENetwork
KB5122871KB5122878+4
CVE-2026-84012 Windows Remote Desktop Services Remote Code Execution VulnerabilityRemote Desktop Gateway Service Important 8.10.7%RCENetwork Fix has a known issue
KB5126646KB5126651+4
CVE-2026-85371 Network Policy Server (NPS) Remote Code Execution VulnerabilityNetwork Policy Server (NPS) Important 8.10.7%RCENetwork Fix has a known issue
KB5126646KB5126651+8
CVE-2026-85799 Network Policy Server (NPS) Remote Code Execution VulnerabilityNetwork Policy Server (NPS) Important 8.10.7%RCENetwork Fix has a known issue
KB5126646KB5126651+8
CVE-2026-85926 Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityWindows Secure Socket Tunneling Protocol (SSTP) Important 8.10.7%RCENetwork Fix has a known issue
KB5126646KB5126651+8
CVE-2026-88173 Windows Background Intelligent Transfer Service (BITS) Remote Code Execution VulnerabilityWindows Background Intelligent Transfer Service (BITS) Important 8.10.5%RCENetwork Fix has a known issue
KB5126646KB5126651+4
CVE-2026-95885 Windows Client for NFS Elevation of Privilege VulnerabilityWindows Client for NFS Important 8.1—EoPNetwork
KB5131077KB5131080+8
CVE-2026-95956 Windows eSCL Scanner Remote Code Execution VulnerabilityWindows eSCL Scanner Important 8.1—RCENetwork
KB5131077KB5131080+6
CVE-2026-96092 Windows Domain Name Service Remote Code Execution VulnerabilityRole: DNS Server Important 8.1—RCENetwork
KB5131077KB5131080
CVE-2026-96177 Windows Domain Name Service Remote Code Execution VulnerabilityRole: DNS Server Important 8.1—RCENetwork
KB5131077KB5131080
CVE-2026-122164 Windows Kerberos Elevation of Privilege VulnerabilityWindows Kerberos Important 8.0—EoPNetwork
KB5131077KB5131080+8
CVE-2026-122988 Windows Admin Center Elevation of Privilege VulnerabilityWindows Admin Center Important 8.0—EoPNetwork
—

Advisories

MSRC guidance without a CVE of its own · 1 advisory
ADV260001
Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.
Published 13 Oct28 affected products
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 12 Nov 22:49 UTC · 273 of 275 readable · 271 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.